Vulnerability · Published Jan 14, 2026 · Assigned by lenovo
CVE-2025-14058
Low 3.2
In plain English
A low-severity missing authentication in Idea Tab Pro TB373FU from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)3.2Low
Exploit odds (30 days)0.2%top 95.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Tab M11 TB330FU TB330XU | 0 – before 17.0.284 |
| Lenovo | Tab K11 TB330FU | 0 – before 17.0.284 |
| Lenovo | Tab K11 TB330FUP | 0 – before 17.0.254 |
| Lenovo | Tab K11 TB330XU | 0 – before 17.0.084 |
| Lenovo | Tab K11 TB330XUP | 0 – before 17.0.254 |
| Lenovo | Idea Tab Pro TB373FU | 0 – before ZUI_17.0.04.266_ST_251120 |
| Lenovo | Tab K9 TB305FU | 0 – before 17.0.10.118 |
| Lenovo | Tab K9 TB305XU | 0 – before 17.0.10.098 |
| Lenovo | Tab Plus TB351FU | 0 – before 17.5.10.023 |
| Lenovo | Tab M8 4th Gen 2024 TB301FU | 0 – before TB301FU_USR_S000126_250919_MP1V1111_ROW |
| Lenovo | Tab M8 4th Gen 2024 TB301XU | 0 – before TB301XU_USR_S000147_250919_MP1V1111_ROW |
| Lenovo | Tab Extreme TB570ZU TB570FU | 0 – before 17.5.184 |
| Lenovo | Tab M10 5G TB360ZU | 0 – before 16.0.882 |
| Lenovo | Tab M8 4th Gen TB300FU | 0 – before TB300XU_USR_S100149_250919_MP1V1111_ROW |
| Lenovo | Tab M8 4th Gen TB300XU | 0 – before TB300FU_USR_S100122_250919_MP1V1111_ROW |
| Lenovo | Tab M9 TB310FU | 0 – before TB310XU_USR_S000913_2510021921_mp1V969_ROW |
| Lenovo | Tab M9 TB310XU | 0 – before TB310FU_USR_S000912_2510022135_mp1V969_ROW |
| Lenovo | Tab P11 2nd Gen TB350XU | 0 – before TB350FU_USER_S231044_2601050946 |
| Lenovo | Tab P11 2nd Gen TB350FU | 0 – before TB350XU_USER_S231018_2601050930 |
| Lenovo | Tab P12 TB370FU | 0 – before 17.0.267 |
| Lenovo | Tab P12 TB372FU | 0 – before 17.0.267 |
| Lenovo | Tab K11 Plus LTE TB352FU | 0 – before 17.0.10.250 |
| Lenovo | Tab K11 Plus LTE TB352XU | 0 – before 17.0.10.242 |
| Lenovo | Yoga Tab Plus TB520FU | 0 – before 17.5.10.036 |
| Lenovo | Tab K11 Gen 2 TB336ZU | 0 – before 17.0.10.541 |
| Lenovo | TAB7 | 0 – before 17.0.10.541 |
| Lenovo | Lenovo Tab with Clear Case TB311FU | 0 – before 17.0.30.303 |
| Lenovo | Lenovo Tab with Folio Case TB311XU | 0 – before 17.0.31.259 |
| Lenovo | Legion Tab TB321FU | 0 – before 17.5.10.031 |
| Lenovo | Legion Tab TB320FC | 0 – before 17.0.339 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L